Salah Chafai

About

Aut viam inveniam aut faciam

Visitors

CTF Achievements

Experience

1. 

   Securinets

   September 2024 – Present · 2 roles
   1. Technical Lead July 2026 - Present
   2. Technical Instructor September 2024 - June 2026
      • Sustained 100% uptime at events hosting 400+ participants by operating isolated, containerized challenge infrastructure with automated deploy and teardown.
      • Delivered hands-on secure-coding and binary-exploitation workshops to students from 10+ universities.
      • Authored exploitation and reverse-engineering challenges modeling real-world memory-safety and logic flaws.
2. 

   EY

   1. Security Engineering Intern June 2026 - August 2026
      • Designed and threat-modeled Bastion, a hardened Linux platform that delivers encrypted competition content and blocks AI-assisted cheating through kernel lockdown, LSM execution policy, egress allowlisting, and TPM 2.0 attestation.
      • Engineered the key-release pipeline (AES-256-GCM, per-user HKDF keys, HashiCorp Vault/HSM, mutual TLS 1.3), ensuring no key material ships in the image and a compromised session cannot expose another user's content.
      • Penetration-tested an Android banking app and its backend, identifying 3 exploitable vulnerabilities, including missing admin-console MFA and an email-flood DoS.
3. 

   Cargo One Express

   1. Web Security Engineer October 2025 - December 2025
      • Shipped the company's internal recruitment platform end to end, adding OAuth 2.0 authentication and encrypted at-rest storage so applicant documents and PII were never stored in plaintext.
      • Enforced least-privilege role-based access control with server-side authorization on every API endpoint, preventing cross-account reads of applicant records.
4. 

   FL1TZ

   1. CTF Player September 2024 - Present
      • Consistently achieved top rankings in competitive CTFs at both national and international levels.
      • Qualified for prestigious competitions including Arab Security Cyber Wargames, Blackhat, Cybersecurity Tech Olymics & CSAW
      • Specialized in Pwn and Reverse Engineering categories across multiple CTF formats
5. 

   INSAT

   1. ICT Engineering Student September 2023 - June 2028
      • Pursuing a National Engineering Diploma (Diplôme National d'Ingénieur): five-year integrated program, equivalent to a Master's degree
      • Relevant coursework: Ethical Hacking & Cybersecurity, Operating Systems & Virtualization, High-Speed Networks, Algorithms & Data Structures
      • Languages: Arabic (native), English (fluent), French (basic)
6. 

   Phantom Penguin

   1. Lead Game Developer November 2020 - 2022
      • Led a cross-functional team of 6 developers to deliver 5+ desktop and mobile game titles from concept to release.
      • Coordinated task allocation and conducted structured code reviews, increasing team productivity by ~40%
      • Stabilized release builds through systematic testing and pre-release triage, achieving 100% on-time deliveries